This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa File: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (raw, json) Hash identifier: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI= Subject key identifier: D6:20:C5:79:B4:73:F6:7A:84:FA:00:A8:10:96:1C:5E:BD:17:8B:67 Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019B76EB32006370B58CEB0316DA1FDAADAF Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42399 IP address blocks: 91.189.112.0/23 maxlen: 23 91.189.112.0/24 maxlen: 24 91.189.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:32:00:63:70:b5:8c:eb:03:16:da:1f:da:ad:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d620c579b473f67a84fa00a810961c5ebd178b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:90:de:0e:a9:d7:0f:a9:f4:e0:b8:49:44:92: da:fe:33:31:21:51:9d:cd:76:70:d4:b1:67:bf:d4: ff:21:f1:6f:53:ba:49:ee:bc:c5:82:60:1c:1a:c5: a5:d0:54:0d:ae:ad:90:9d:2d:aa:3d:95:e8:b2:70: a6:f2:27:bf:97:e6:f5:99:42:e5:64:a3:0c:a4:ef: c5:88:b2:e6:57:32:5f:96:d7:8e:d2:08:71:5d:fc: 8a:f8:06:26:c4:ff:ff:9b:4a:62:2a:d6:36:0e:c8: a2:9c:72:11:f3:7b:fb:80:d3:9b:1c:c0:01:af:6d: b4:4e:7b:6c:dd:24:b0:76:2d:43:e9:d9:0d:39:d1: 4a:88:c2:c8:3f:a3:4e:99:03:96:b6:b8:3e:9f:1e: cd:ac:54:19:2b:ec:53:71:75:48:7f:f1:b4:24:2d: f2:07:66:ca:97:58:6c:d4:30:a5:64:0e:0e:71:f4: 68:8d:54:2d:e9:69:72:3b:1b:3b:ad:f1:d1:bf:dd: 7a:20:7a:16:8c:36:dd:8b:a3:67:7e:62:c2:29:f7: 94:db:21:b4:75:d9:ce:f3:66:2d:ea:18:5b:77:56: 6a:a1:11:bf:78:5a:4b:9b:6c:6f:22:08:7c:93:0b: ec:eb:8f:12:f4:eb:f0:8c:fb:3b:38:45:e6:8c:6e: 09:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:20:C5:79:B4:73:F6:7A:84:FA:00:A8:10:96:1C:5E:BD:17:8B:67 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.112.0/23 Signature Algorithm: sha256WithRSAEncryption 96:ba:66:5f:20:fe:a9:fc:47:8f:8a:6c:aa:84:12:78:11:99: fa:01:e1:f4:0e:1f:6b:67:f2:14:08:b0:34:ed:64:07:ce:72: 6f:f0:0e:47:47:c5:f1:6f:24:02:5e:2d:2f:2d:00:51:07:fa: fa:d1:0b:4b:de:66:6e:e4:71:34:a6:1f:fe:cd:54:32:c8:12: 60:cb:30:fe:45:80:09:e5:25:7a:b9:78:e4:cc:be:ff:ae:99: 67:b7:96:42:99:ef:75:39:51:a6:f5:7e:6c:80:e3:06:01:51: 5b:f4:39:b8:d4:94:cc:15:b0:67:0c:ff:b1:4e:24:20:1e:81: 2a:ef:e8:51:70:33:8d:6f:18:bc:de:59:3d:5c:69:ac:77:62: 0c:94:3e:ff:e7:7c:40:68:9f:1f:3e:41:d9:00:38:a6:a0:8f: 13:71:43:b1:ce:5e:4d:5b:e0:7b:19:11:db:25:94:db:40:89: 02:16:27:f5:55:da:9a:09:f7:b2:46:08:ec:a3:8b:2e:45:fa: bc:f2:dc:26:16:31:3d:df:49:c9:9b:96:40:5f:d1:b8:ca:6c: 28:53:56:fd:3f:38:28:3c:d5:55:16:f5:fe:cf:1a:a9:d9:8b: 4f:71:96:ee:71:79:2c:3f:c6:60:0a:7c:42:99:96:ac:e3:cd: 5f:d3:3e:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zIAY3C1jOsDFtof2q2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjIwYzU3OWI0NzNmNjdhODRmYTAwYTgxMDk2MWM1ZWJkMTc4YjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipDeDqnXD6n04LhJRJLa/jMxIVGd zXZw1LFnv9T/IfFvU7pJ7rzFgmAcGsWl0FQNrq2QnS2qPZXosnCm8ie/l+b1mULl ZKMMpO/FiLLmVzJflteO0ghxXfyK+AYmxP//m0piKtY2DsiinHIR83v7gNObHMAB r220Tnts3SSwdi1D6dkNOdFKiMLIP6NOmQOWtrg+nx7NrFQZK+xTcXVIf/G0JC3y B2bKl1hs1DClZA4OcfRojVQt6WlyOxs7rfHRv916IHoWjDbdi6NnfmLCKfeU2yG0 ddnO82Yt6hhbd1ZqoRG/eFpLm2xvIgh8kwvs648S9OvwjPs7OEXmjG4J6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNYgxXm0c/Z6hPoAqBCWHF69F4tnMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvMWlERmViUno5bnFFLWdDb0VKWWNYcjBYaTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW71wMA0G CSqGSIb3DQEBCwUAA4IBAQCWumZfIP6p/EePimyqhBJ4EZn6AeH0Dh9rZ/IUCLA0 7WQHznJv8A5HR8XxbyQCXi0vLQBRB/r60QtL3mZu5HE0ph/+zVQyyBJgyzD+RYAJ 5SV6uXjkzL7/rplnt5ZCme91OVGm9X5sgOMGAVFb9Dm41JTMFbBnDP+xTiQgHoEq 7+hRcDONbxi83lk9XGmsd2IMlD7/53xAaJ8fPkHZADimoI8TcUOxzl5NW+B7GRHb JZTbQIkCFif1VdqaCfeyRgjso4suRfq88twmFjE930nJm5ZAX9G4ymwoU1b9Pzgo PNVVFvX+zxqp2YtPcZbucXksP8ZgCnxCmZas481f0z4c -----END CERTIFICATE-----Generated at Tue Jan 27 19:16:32 2026 by rpki-client